Internet News Section
The NPM repository has identified 25 malicious packages that were distributed using typosquatting, i.e., with names similar to those of popular libraries, intending for users to make a typing error or not notice the differences when selecting a module from the list. 17 of these packages contained malicious code to search for Discord tokens in the local file system and […]
The release of the I2P anonymous network 1.7.0 and the C++ client i2pd 2.41.0 has occurred. Recall that I2P represents a multi-layer anonymous distributed network operating over the normal internet, actively utilizing end-to-end encryption, ensuring anonymity and isolation. The network is built in a P2P mode and is formed thanks to resources (bandwidth) provided by the network's users, allowing it to operate without the need for centrally managed servers (communications […]
After 14 months since the last release, the free web browser Otter 1.0.3 is available, aiming to recreate the classic interface of Opera 12, independent of specific browser engines, and focused on advanced users who do not accept trends towards simplifying interfaces and reducing customization options. The browser is written in C++ using the Qt5 library (without QML). The source codes […]
A vulnerability (CVE-2022-25636) that allows code execution at the kernel level has been discovered in Netfilter, a subsystem of the Linux kernel used for filtering and modifying network packets. A proof-of-concept exploit is reportedly being prepared, allowing a local user to escalate their privileges in Ubuntu 21.10 with the KASLR protection mechanism disabled. The issue manifests starting from kernel 5.4. A fix is currently available as a patch (corrective kernel releases […]
After a two-year hiatus, the release of the compact Live distribution Slax 11.2 has been prepared. Since 2018, the distribution has been switched from Slackware's base to a Debian package base, using the APT package manager and systemd for initialization. The graphical environment is built on the FluxBox window manager and the program launch interface xLunch, specially developed for Slax by project participants. The boot image occupies 280 MB […]
The release of the nftables 1.0.2 packet filter has been published, unifying the packet filtering interfaces for IPv4, IPv6, ARP, and network bridges (aimed at replacing iptables, ip6tables, arptables, and ebtables). Necessary changes for the operation of nftables 1.0.2 are included in the Linux kernel 5.17-rc. The nftables package includes user-space packet filtering components, while at the level of […]
After five years of development, the stable version of the FreeDOS operating system 1.3 has been released, which develops a free alternative to DOS with an environment of GNU utilities. At the same time, a new release of the FDTUI 0.8 (FreeDOS Text User Interface) shell is available, providing a user interface implementation for FreeDOS. FreeDOS is distributed under the GPLv2 license, and the size of the bootable ISO image is 375 MB. The FreeDOS project was […]
The release of the labwc 0.5 project has been announced, which develops a compositing server for Wayland with capabilities reminiscent of the Openbox window manager (the project is presented as an attempt to create an alternative to Openbox for Wayland). Features of labwc include minimalism, compact implementation, extensive customization options, and high performance. The project code is written in C and is distributed under the GPLv2 license. It is based on the […]
Oracle has released an update for Solaris 11.4 SRU 42 (Support Repository Update), which offers a series of further fixes and enhancements for the Solaris 11.4 branch. To install the proposed fixes in the update, simply execute the ‘pkg update’ command. In this new release: Packages with a new branch of the OpenSSL 3.0 library have been added. In one of the following releases, OpenSSL 3.0 will […]
In the Expat 2.4.5 library, used for parsing the XML format in many projects including Apache httpd, OpenOffice, LibreOffice, Firefox, Chromium, Python, and Wayland, five critical vulnerabilities have been fixed, four of which potentially allow remote code execution when processing specially crafted XML data in applications using libexpat. Two of the vulnerabilities have reported working exploits. Keep track of the publications […]
The release of OpenBot 0.5 has been published, which is developing a platform for creating mobile wheeled robots based on ordinary Android smartphones. The platform was created in the research division of Intel and advances the idea of utilizing the computational capabilities of smartphones along with the GPS, gyroscopes, compasses, and cameras built into them. The software for controlling the robot, analyzing the surrounding space, and […]
A critical vulnerability (CVE-2022-0633) has been identified in the WordPress plugin UpdraftPlus, which has over 3 million active installations, allowing unauthorized users to download a copy of the site's database, which contains not only content but also user parameters and password hashes. The issue has been fixed in versions 1.22.3 and 2.22.3, which are recommended for all UpdraftPlus users to install as soon as possible. UpdraftPlus is presented as the most popular plugin for […]